CVE-2025-5319

CVE-2025-5319 affects Emit Informatics’ DIGITA Efficiency Management System (DIGITA EMS). Multiple connected sources describe an improper neutralization of special elements in SQL commands (SQL injection) as the root cause, with the DIGITA EMS affected through 03022026. The NVD/Red Hat records co...

CVE-2025-28162

creationtimestamp| type| source ---|---|--- 2026-02-03 12:46:15+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mdxfdkarh22c...

CVE-2025-67848

creationtimestamp| type| source ---|---|--- 2026-02-03 11:23:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxap24qmf2h...

CVE-2025-59902

creationtimestamp| type| source ---|---|--- 2026-02-03 11:16:16+00:00| seen| Telegram/5v7a4Pbi9U1CMbf76tYHiAUJARPS3oFvKnOwO3ZDIa4vGns...

CVE-2025-10314

creationtimestamp| type| source ---|---|--- 2026-02-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-01 2026-02-05 03:18:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me3gjdvo5k2r...

CVE-2025-8456

CVE-2025-8456 affects Kod8 Individual and SME Website. Red Hat and Circl/CIRCL data confirm a vulnerability in input handling during web page generation, leading to a Reflected XSS . Affected software/versions are cited as Kod8 Individual and SME Website up to 03022026. The underlying cause is im...

CVE-2026-1375

creationtimestamp| type| source ---|---|--- 2026-02-03 08:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdwwlhtsev2h 2026-04-09 21:00:05+00:00| published-proof-of-concept| Telegram/uEPSzFNr6HqJN1CCE1x2MfixnAoe1zyVBXupCwzjdQjfEc...

EUVD-2025-206743

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Reflected XSS.This issue affects SKSPro: through 07012026...

CVE-2025-61652

Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from before 1.43.4, 1.44.1...

CVE-2025-61636

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLButtonField.Php. This issue affects MediaWiki: from before 1.39.14, 1.43.4,...

CVE-2025-61642

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/CodexHTMLForm.Php, includes/htmlform/fields/HTMLButtonField.Php. This issue affects...

CVE-2025-61637

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Action/mediawiki.Action.Edit.Preview.Js, resources/src/mediawiki.Page.Preview.Js...

PT-2026-5871

Name of the Vulnerable Software and Affected Versions Fikir Odalari AdminPando versions prior to 2026-01-26 Fikir Odalari AdminPando version 1.0.1 Description A SQL injection issue exists in the login functionality. The username and password parameters are susceptible to SQL injection, potentiall...

Ankara Host Website Software 跨站脚本漏洞

Ankara Host Website Software is a web design software developed by Ankara Host in Turkey. Versions of Ankara Host Website Software prior to 03022026 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper input during web page generation, and could lead to...

CVE-2026-20412

creationtimestamp| type| source ---|---|--- 2026-02-02 18:18:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvhha7eum2o...

CVE-2026-20418

creationtimestamp| type| source ---|---|--- 2026-02-02 14:19:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv23hkxqo2o...

CVE-2026-1761

creationtimestamp| type| source ---|---|--- 2026-02-02 14:19:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv237qncn23 2026-03-01 14:34:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfyxj4qruk2s...

CVE-2026-23794

creationtimestamp| type| source ---|---|--- 2026-02-02 13:00:57+00:00| seen| https://seclists.org/oss-sec/2026/q1/138 2026-02-02 15:00:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdv4f2jj622s...

CVE-2025-8587

The CVE-2025-8587 entry describes an SQL Injection vulnerability in SKSPro from AKCE Software Technology R&D Industry and Trade Inc. The issue arises from improper neutralization of special elements in SQL commands, affecting SKSPro versions up to 07012026. Multiple feeds (Red Hat, NVD, CVE list,...

CVE-2025-8587

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows SQL Injection. This issue affects SKSPro: through 07012026...